@plures/praxis 1.0.2 → 1.1.0

package/src/cloud/auth.ts

@@ -1,10 +1,10 @@
 /**
  * GitHub OAuth Authentication
- * 
+ *
  * GitHub OAuth integration for Praxis Cloud Relay identity.
  */
 
-import type { AuthResult, GitHubUser } from "./types.js";
+import type { AuthResult, GitHubUser } from './types.js';
 
 /**
  * GitHub OAuth configuration
@@ -32,12 +32,12 @@ export class GitHubOAuth {
   getAuthorizationUrl(state?: string): string {
     const params = new URLSearchParams({
       client_id: this.config.clientId,
-      scope: this.config.scope || "read:user user:email",
+      scope: this.config.scope || 'read:user user:email',
       state: state || this.generateState(),
     });
 
     if (this.config.redirectUri) {
-      params.set("redirect_uri", this.config.redirectUri);
+      params.set('redirect_uri', this.config.redirectUri);
     }
 
     return `https://github.com/login/oauth/authorize?${params.toString()}`;
@@ -48,31 +48,28 @@ export class GitHubOAuth {
    */
   async exchangeCode(code: string): Promise<AuthResult> {
     if (!this.config.clientSecret) {
-      throw new Error("Client secret is required for code exchange");
+      throw new Error('Client secret is required for code exchange');
     }
 
     try {
-      const response = await fetch(
-        "https://github.com/login/oauth/access_token",
-        {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            Accept: "application/json",
-          },
-          body: JSON.stringify({
-            client_id: this.config.clientId,
-            client_secret: this.config.clientSecret,
-            code,
-          }),
-        }
-      );
+      const response = await fetch('https://github.com/login/oauth/access_token', {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+          Accept: 'application/json',
+        },
+        body: JSON.stringify({
+          client_id: this.config.clientId,
+          client_secret: this.config.clientSecret,
+          code,
+        }),
+      });
 
       if (!response.ok) {
         throw new Error(`Token exchange failed: ${response.statusText}`);
       }
 
-      const data = await response.json() as any;
+      const data = (await response.json()) as any;
 
       if (data.error) {
         throw new Error(`GitHub OAuth error: ${data.error_description || data.error}`);
@@ -85,9 +82,7 @@ export class GitHubOAuth {
         success: true,
         token: data.access_token,
         user,
-        expiresAt: data.expires_in
-          ? Date.now() + data.expires_in * 1000
-          : undefined,
+        expiresAt: data.expires_in ? Date.now() + data.expires_in * 1000 : undefined,
       };
     } catch (error) {
       return {
@@ -100,10 +95,10 @@ export class GitHubOAuth {
    * Get user information from GitHub
    */
   async getUserInfo(token: string): Promise<GitHubUser> {
-    const response = await fetch("https://api.github.com/user", {
+    const response = await fetch('https://api.github.com/user', {
       headers: {
         Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github.v3+json",
+        Accept: 'application/vnd.github.v3+json',
       },
     });
 
@@ -111,7 +106,7 @@ export class GitHubOAuth {
       throw new Error(`Failed to get user info: ${response.statusText}`);
     }
 
-    const data = await response.json() as any;
+    const data = (await response.json()) as any;
 
     return {
       id: data.id,
@@ -139,7 +134,7 @@ export class GitHubOAuth {
    */
   private generateState(): string {
     const array = new Uint8Array(16);
-    if (typeof crypto !== "undefined" && crypto.getRandomValues) {
+    if (typeof crypto !== 'undefined' && crypto.getRandomValues) {
       crypto.getRandomValues(array);
     } else {
       // Fallback for Node.js
@@ -147,9 +142,7 @@ export class GitHubOAuth {
         array[i] = Math.floor(Math.random() * 256);
       }
     }
-    return Array.from(array, (byte) => byte.toString(16).padStart(2, "0")).join(
-      ""
-    );
+    return Array.from(array, (byte) => byte.toString(16).padStart(2, '0')).join('');
   }
 }
 
@@ -163,36 +156,31 @@ export function createGitHubOAuth(config: GitHubOAuthConfig): GitHubOAuth {
 /**
  * Authenticate with GitHub OAuth device flow (for CLI)
  */
-export async function authenticateWithDeviceFlow(
-  clientId: string
-): Promise<AuthResult> {
+export async function authenticateWithDeviceFlow(clientId: string): Promise<AuthResult> {
   try {
     // Request device code
-    const deviceResponse = await fetch(
-      "https://github.com/login/device/code",
-      {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-        },
-        body: JSON.stringify({
-          client_id: clientId,
-          scope: "read:user user:email",
-        }),
-      }
-    );
+    const deviceResponse = await fetch('https://github.com/login/device/code', {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        Accept: 'application/json',
+      },
+      body: JSON.stringify({
+        client_id: clientId,
+        scope: 'read:user user:email',
+      }),
+    });
 
     if (!deviceResponse.ok) {
       throw new Error(`Device flow initiation failed: ${deviceResponse.statusText}`);
     }
 
-    const deviceData = await deviceResponse.json() as any;
+    const deviceData = (await deviceResponse.json()) as any;
 
-    console.log("\nTo authenticate with GitHub:");
+    console.log('\nTo authenticate with GitHub:');
     console.log(`1. Visit: ${deviceData.verification_uri}`);
     console.log(`2. Enter code: ${deviceData.user_code}`);
-    console.log("\nWaiting for authentication...\n");
+    console.log('\nWaiting for authentication...\n');
 
     // Poll for access token
     const interval = deviceData.interval * 1000 || 5000;
@@ -201,23 +189,20 @@ export async function authenticateWithDeviceFlow(
     while (Date.now() < expiresAt) {
       await new Promise((resolve) => setTimeout(resolve, interval));
 
-      const tokenResponse = await fetch(
-        "https://github.com/login/oauth/access_token",
-        {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            Accept: "application/json",
-          },
-          body: JSON.stringify({
-            client_id: clientId,
-            device_code: deviceData.device_code,
-            grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-          }),
-        }
-      );
-
-      const tokenData = await tokenResponse.json() as any;
+      const tokenResponse = await fetch('https://github.com/login/oauth/access_token', {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+          Accept: 'application/json',
+        },
+        body: JSON.stringify({
+          client_id: clientId,
+          device_code: deviceData.device_code,
+          grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+        }),
+      });
+
+      const tokenData = (await tokenResponse.json()) as any;
 
       if (tokenData.access_token) {
         // Get user info
@@ -231,12 +216,12 @@ export async function authenticateWithDeviceFlow(
         };
       }
 
-      if (tokenData.error && tokenData.error !== "authorization_pending") {
+      if (tokenData.error && tokenData.error !== 'authorization_pending') {
         throw new Error(`Authentication failed: ${tokenData.error_description || tokenData.error}`);
       }
     }
 
-    throw new Error("Authentication timeout");
+    throw new Error('Authentication timeout');
   } catch (error) {
     return {
       success: false,

package/src/cloud/billing.ts

@@ -1,6 +1,6 @@
 /**
  * GitHub Sponsors and Marketplace Billing
- * 
+ *
  * Types and utilities for GitHub-based monetization.
  */
 
@@ -11,22 +11,22 @@ export enum SubscriptionTier {
   /**
    * Free tier - limited usage
    */
-  FREE = "free",
-  
+  FREE = 'free',
+
   /**
    * Solo tier - individual developers via GitHub Sponsors
    */
-  SOLO = "solo",
-  
+  SOLO = 'solo',
+
   /**
    * Team tier - small teams via GitHub Sponsors
    */
-  TEAM = "team",
-  
+  TEAM = 'team',
+
   /**
    * Enterprise tier - self-service enterprise via GitHub Sponsors/Marketplace
    */
-  ENTERPRISE = "enterprise",
+  ENTERPRISE = 'enterprise',
 }
 
 /**
@@ -36,17 +36,17 @@ export enum BillingProvider {
   /**
    * GitHub Sponsors
    */
-  SPONSORS = "sponsors",
-  
+  SPONSORS = 'sponsors',
+
   /**
    * GitHub Marketplace (SaaS)
    */
-  MARKETPLACE = "marketplace",
-  
+  MARKETPLACE = 'marketplace',
+
   /**
    * Free tier (no billing)
    */
-  NONE = "none",
+  NONE = 'none',
 }
 
 /**
@@ -56,22 +56,22 @@ export enum SubscriptionStatus {
   /**
    * Active subscription
    */
-  ACTIVE = "active",
-  
+  ACTIVE = 'active',
+
   /**
    * Subscription cancelled, but still valid until period end
    */
-  CANCELLED = "cancelled",
-  
+  CANCELLED = 'cancelled',
+
   /**
    * Subscription expired or payment failed
    */
-  EXPIRED = "expired",
-  
+  EXPIRED = 'expired',
+
   /**
    * No subscription
    */
-  NONE = "none",
+  NONE = 'none',
 }
 
 /**
@@ -82,26 +82,26 @@ export interface TierLimits {
    * Maximum sync operations per month
    */
   maxSyncsPerMonth: number;
-  
+
   /**
    * Maximum storage in bytes
    */
   maxStorageBytes: number;
-  
+
   /**
    * Maximum number of team members (null = unlimited)
    */
   maxTeamMembers: number | null;
-  
+
   /**
    * Maximum number of apps/projects
    */
   maxApps: number;
-  
+
   /**
    * Support level
    */
-  supportLevel: "community" | "standard" | "priority";
+  supportLevel: 'community' | 'standard' | 'priority';
 }
 
 /**
@@ -112,42 +112,42 @@ export interface Subscription {
    * Subscription tier
    */
   tier: SubscriptionTier;
-  
+
   /**
    * Subscription status
    */
   status: SubscriptionStatus;
-  
+
   /**
    * Billing provider
    */
   provider: BillingProvider;
-  
+
   /**
    * GitHub sponsor tier ID (if applicable)
    */
   sponsorTierId?: string;
-  
+
   /**
    * GitHub Marketplace plan ID (if applicable)
    */
   marketplacePlanId?: number;
-  
+
   /**
    * Subscription start date
    */
   startDate: number;
-  
+
   /**
    * Current period end date
    */
   periodEnd?: number;
-  
+
   /**
    * Whether subscription auto-renews
    */
   autoRenew: boolean;
-  
+
   /**
    * Usage limits for this tier
    */
@@ -161,23 +161,23 @@ export interface BillingEvent {
   /**
    * Event type
    */
-  type: "subscription_created" | "subscription_cancelled" | "subscription_renewed" | "tier_changed";
-  
+  type: 'subscription_created' | 'subscription_cancelled' | 'subscription_renewed' | 'tier_changed';
+
   /**
    * Timestamp
    */
   timestamp: number;
-  
+
   /**
    * User/organization ID
    */
   userId: number;
-  
+
   /**
    * Old subscription (for changes)
    */
   oldSubscription?: Subscription;
-  
+
   /**
    * New subscription
    */
@@ -193,28 +193,28 @@ export const TIER_LIMITS: Record<SubscriptionTier, TierLimits> = {
     maxStorageBytes: 10 * 1024 * 1024, // 10 MB
     maxTeamMembers: 1,
     maxApps: 1,
-    supportLevel: "community",
+    supportLevel: 'community',
   },
   [SubscriptionTier.SOLO]: {
     maxSyncsPerMonth: 50000,
     maxStorageBytes: 1024 * 1024 * 1024, // 1 GB
     maxTeamMembers: 1,
     maxApps: 10,
-    supportLevel: "standard",
+    supportLevel: 'standard',
   },
   [SubscriptionTier.TEAM]: {
     maxSyncsPerMonth: 500000,
     maxStorageBytes: 10 * 1024 * 1024 * 1024, // 10 GB
     maxTeamMembers: 10,
     maxApps: 50,
-    supportLevel: "standard",
+    supportLevel: 'standard',
   },
   [SubscriptionTier.ENTERPRISE]: {
     maxSyncsPerMonth: 5000000,
     maxStorageBytes: 100 * 1024 * 1024 * 1024, // 100 GB
     maxTeamMembers: null, // unlimited
     maxApps: 1000,
-    supportLevel: "priority",
+    supportLevel: 'priority',
   },
 };
 
@@ -228,17 +228,17 @@ export function hasAccessToTier(
   if (subscription.status !== SubscriptionStatus.ACTIVE) {
     return false;
   }
-  
+
   const tierOrder = [
     SubscriptionTier.FREE,
     SubscriptionTier.SOLO,
     SubscriptionTier.TEAM,
     SubscriptionTier.ENTERPRISE,
   ];
-  
+
   const currentTierIndex = tierOrder.indexOf(subscription.tier);
   const requiredTierIndex = tierOrder.indexOf(requiredTier);
-  
+
   return currentTierIndex >= requiredTierIndex;
 }
 
@@ -258,19 +258,19 @@ export function checkUsageLimits(
   violations: string[];
 } {
   const violations: string[] = [];
-  
+
   if (usage.syncCount > subscription.limits.maxSyncsPerMonth) {
     violations.push(
       `Sync limit exceeded: ${usage.syncCount}/${subscription.limits.maxSyncsPerMonth}`
     );
   }
-  
+
   if (usage.storageBytes > subscription.limits.maxStorageBytes) {
     violations.push(
       `Storage limit exceeded: ${(usage.storageBytes / 1024 / 1024).toFixed(2)}MB/${(subscription.limits.maxStorageBytes / 1024 / 1024).toFixed(2)}MB`
     );
   }
-  
+
   if (
     subscription.limits.maxTeamMembers !== null &&
     usage.teamMembers > subscription.limits.maxTeamMembers
@@ -279,13 +279,11 @@ export function checkUsageLimits(
       `Team member limit exceeded: ${usage.teamMembers}/${subscription.limits.maxTeamMembers}`
     );
   }
-  
+
   if (usage.appCount > subscription.limits.maxApps) {
-    violations.push(
-      `App limit exceeded: ${usage.appCount}/${subscription.limits.maxApps}`
-    );
+    violations.push(`App limit exceeded: ${usage.appCount}/${subscription.limits.maxApps}`);
   }
-  
+
   return {
     withinLimits: violations.length === 0,
     violations,
@@ -314,16 +312,19 @@ export function createSponsorSubscription(
   monthlyPriceInCents: number
 ): Subscription {
   let tier = SubscriptionTier.FREE;
-  
+
   // Map price to tier (example pricing)
-  if (monthlyPriceInCents >= 5000) { // $50/month
+  if (monthlyPriceInCents >= 5000) {
+    // $50/month
     tier = SubscriptionTier.ENTERPRISE;
-  } else if (monthlyPriceInCents >= 2000) { // $20/month
+  } else if (monthlyPriceInCents >= 2000) {
+    // $20/month
     tier = SubscriptionTier.TEAM;
-  } else if (monthlyPriceInCents >= 500) { // $5/month
+  } else if (monthlyPriceInCents >= 500) {
+    // $5/month
     tier = SubscriptionTier.SOLO;
   }
-  
+
   return {
     tier,
     status: SubscriptionStatus.ACTIVE,